diff --git a/requirements.txt b/requirements.txt
index ae1a2b7..d6106b9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,3 +2,4 @@ psycopg2-binary==2.7.4
 sqlalchemy==1.2.5
 pandas==0.22.0
 xlrd==1.0.0
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability